PT-2025-38088 · Hewlett Packardaruba Networking · Edgeconnect Sd-Wan Gateways

Ncc Group · Published 2025-09-16 · Updated 2025-09-17 · CVE-2025-37128

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking EdgeConnect SD-WAN Gateways (affected versions not specified)

Description A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could disrupt system operations, potentially resulting in an unstable system state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-11498

CVE-2025-37128

Affected Products

Edgeconnect Sd-Wan Gateways

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-37128 · Security Note
• https://bdu.fstec.ru/vul/2025-11498 · Security Note
• https://twitter.com/CVEnew/status/1968190761821704595 · Twitter Post
• https://t.me/CVEtracker/32698 · Telegram Post
• https://t.me/cveNotify/135609 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://twitter.com/VulmonFeeds/status/1968196112784773592 · Twitter Post